illurity-logo
Log in

Site menu:

Categories

Tags

Site search

November 2018
M T W T F S S
« Dec    
 1234
567891011
12131415161718
19202122232425
2627282930  

Links:

Archives

Echo Mirage

This is more fun that it ought to be: Echo Mirage is a generic network proxy tool that can wrap an application and intercept and modify its network traffic, including traffic encrypted by native Windows or OpenSSL functions. Unfortunately, it can not handle other/proprietary types of encryption, such as that used by Skype.

The intercept filter can do regex matches on address, port, and content. So you could, for example, write a send content filter like “\d{3}-\d{2}-\d{4}” to catch social-security numbers being sent. Wrap IE or Firefox, and you can use it a troubleshooting tool – for example, look for a cgi parameter (like dhcpOptionObjTagType which is misbehaving) and rewrite the value that is being posted. Or use it as a fuzzer to test error-handling and general robustness.

This could evolve into a deep-packet inspection personal firewall, automatically wrapping processes and watching for sensitive data at the host level, perhaps controlled by a central policy server, while also allowing for the definition of personal watch-lists.

Share: These icons link to social bookmarking sites where readers can share and discover new web pages.
  • Twitter
  • LinkedIn
  • Facebook
  • email
  • Google Bookmarks
  • del.icio.us
  • StumbleUpon
  • Reddit

You must be logged in to post a comment.